Data Protection Law
At Ondati Mogaka and Advocates Associates, we offer expert legal services in data protection and privacy law, helping clients comply with Kenya’s Data Protection Act 2019 and align with international standards such as the UK GDPR and EU GDPR. With the increasing scrutiny on how personal information is handled, organisations must take active steps to protect data, uphold individual rights, and avoid regulatory breaches.
We work with a diverse range of clients — including financial institutions, healthcare providers, technology companies, NGOs, educational institutions, government agencies, and retail businesses — offering tailored legal support that reflects both sector-specific needs and broader legal obligations.
Our Services
- Drafting and reviewing privacy policies and internal data governance frameworks
- Advising on lawful data collection, processing, and retention practices
- Preparing and reviewing data processing agreements with third parties
- Assisting with data protection impact assessments (DPIAs)
- Guiding on cross-border data transfers and cloud storage compliance
- Advising on consent management and marketing practices
- Training teams on compliance, accountability, and incident response
- Responding to data breaches and assisting with regulatory reporting
- Representing clients before the Office of the Data Protection Commissioner (ODPC)